Patch forthcoming.
Created attachment 201435 [details] work in progress This makes v8-raytrace fail. Will investigate why.
Created attachment 201461 [details] the patch
Comment on attachment 201461 [details] the patch View in context: https://bugs.webkit.org/attachment.cgi?id=201461&action=review > Source/JavaScriptCore/ftl/FTLCapabilities.cpp:91 > + case Array::ForceExit: > + return true; Note, this is the reason why this code was moved into a separate function: I wanted to be able to treat ForceExit as being OK immediately; and there was no easy way to do it with the way the control flow was nested previously.
Landed in http://trac.webkit.org/changeset/149941